5fe5fafe87be8b9534ac5cb23eeb3529_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fe5fafe87be8b9534ac5cb23eeb3529_JaffaCakes118
Size

87KB
MD5

5fe5fafe87be8b9534ac5cb23eeb3529
SHA1

015b5b18524288177654ab7aef500105c28dd953
SHA256

7b554819a9c7b382cac1d8402aaca3a7caa298dc65d5c090469081850bf5b461
SHA512

8119bcb407c7d7b77b60730fb9eda987364000a768fecd4c7eeca46163bd614fdb3bece1e249f52b521004bc0ad974eb060073213d9dd51aeb97c0258cf4d6ce
SSDEEP

1536:uv8mHbEfKiUoidHzy9V1AjRIdbkcDMFLEkkcKRjEErxTWDTMqhGKYIZTET8FVxd8:uv8mQ2dHqEjWwcDMVAjBkMqhGKZTbzx+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fe5fafe87be8b9534ac5cb23eeb3529_JaffaCakes118

Files

5fe5fafe87be8b9534ac5cb23eeb3529_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb0636f93e0b296e78de15f4b4abd829

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
SetFileAttributesA
VerifyVersionInfoW
SetCommBreak
GetSystemTimes
ConvertFiberToThread
CreateNlsSecurityDescriptor
SearchPathA
Thread32First
GetVolumeInformationA
lstrcmpiW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 31KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE